{
  "id": 16325309,
  "title": "Duped by a fake bank call? Know your rights after an unauthorised debit",
  "url": "https://urgent.news/2026/10/24/duped-by-a-fake-bank-call-know-your-rights-after-an-unauthorised-debit",
  "topic": "world",
  "section": "World",
  "published": "2026-10-24T12:50:29.000Z",
  "source": {
    "name": "The Indian Express",
    "slug": "the-indian-express",
    "url": "https://indianexpress.com/article/technology/otp-scam-bank-refund-rbi-rules-cyber-fraud-10935297/"
  },
  "original_language": "en",
  "account": "A phishing scam in July 2019 resulted in a retired teacher losing Rs 3.73 lakh after she shared OTPs with fraudsters posing as bank officials. The fraudsters exploited a message stating that a debit card would be blocked. The teacher reported the fraud to the State Bank of India (SBI) within 51 minutes of receiving the initial warning. This case illustrates how urgency is a fraudster's biggest weapon. Messages threatening account suspension, card deactivation, or service disruption are designed to prevent customers from verifying the information. To protect oneself from such scams, customers must never share OTPs, PINs, passwords, or MPINs with anyone, even if they claim to be from the bank. If a suspicious message is received, customers should verify it independently through the bank's official app, website, or customer care number and avoid clicking on links or using phone numbers provided in the message. When an unauthorised transaction occurs, the customer's liability depends on the circumstances, RBI rules, and available evidence. Under the RBI framework, customers can have zero liability if the loss results from the bank's negligence or deficiency or from third-party breaches where neither party bears responsibility. However, if the loss is due to customer negligence, such as sharing payment credentials, they are liable until the fraud is reported to the bank. Prompt reporting is crucial, as it can become important evidence in a subsequent dispute. Banks are fully liable for losses resulting from their own negligence, including weak security or failure to send alerts. To be held responsible for customer negligence, the bank must provide reliable evidence of the customer's lack of diligence.",
  "summary": null,
  "key_points": [
    "Retired teacher lost Rs 3.73 lakh in July 2019 phishing scam",
    "Fraudsters posed as bank officials, threatened debit card block",
    "Customer must never share OTPs, PINs with anyone"
  ],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}